Invisible Indirect Injection: A Puzzle for ChatGPT

Alessandro Bozzon @aleboz